METHOD AND APPARATUS TO FACILITATE 
INDIVIDUAL AND GLOBAL LOCKOUTS TO 
NETWORK APPLICATIONS 


ABSTRACT 


One embodiment of the present invention provides a system that facilitates 
locking an adversary out of a network application. The system operates by 
receiving a request at a server, which includes an authentication credential, to 
access the network appUcation. This authentication credential includes a user 
identifier associated with a user and an address of a user device. The system 
examines an audit log to determine if the user identifier has been locked out from 
the address of the user device. If so, the system denies access to the network 
application. Otherwise, the system checks the authentication credential for 
validity. If the authentication credential is valid, the system allows access to the 
network application. Otherwise, the system logs a failed attempt in the audit log 
and denies access to the network application. After a threshold number of failed 
attempts, the user identifier is locked out from the network address. 
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